Creating Reference role. (Master or Parent role).
- Type PCFG in command line
- Type in the name of the role you want to create.

- and click
and fill in the description of the role.
- Go to the menu tab
and insert all the t-code and report you want in this role.
- Go to the authorization tab
and click to change the authorizations.
- Fill in the Org. elements, or you can leave them blank, since reference roles are not assigned to any user. This is not a best practice.

- Save
and generate the role.
Creating a derived role.
- Follow step 1 and 2.
- Fill in the Reference role name.

- Maintain the Org values in authorization tab.

- Save
and generate the role.
- Open the reference role (master role) created in step 1 to 7, and generate all the derived role using this
.
- It will give you the screen below, click generate and you are done.

- You can assign the derived role to users.
|